SERIAL NUMBER IS not FISHY, PATCH'ITCH'ING IS MORE YUMMIE


RegEditor v 1.2 Beta
A Cracking Tutorial
by ASTAGA [TTM]



WHERE TO DOWNLOAD :

RegEditor v 1.2 Beta
http://www.utils32.com/files/regeditr.zip
Program Release Date: December 14, 2000
Program Description:
  RegEditor v1.2 - RegEditor is a registry editing tool 
  which works with .reg files.
Company Name:
  N.I.T.-New Information Technologies
Contact WWW URL:
  http://www.utils32.com


ABOUT THE PROGRAM


RegEditor – is the great and convenient opportunity to. REG-
files editors. It also allows you to do a set of useful 
operations with system registry. 
If you are frequently working with .REG-files – RegEditor 
will simplify your work.  User friendly simple design in 
RegEdit style helps you to adopt for using this program 
in a few moments. As for look inside – RegEditor works 
with both .REG-files format – old REGEDIT4 format and 
new REGEDIT5 format (UNICODE). Every copy of opened .REG-
file are shown in own window.


PROTECTION/LIMITATION : Time Limo

-  This beta version will work till Jan 30 2001.



HOW TO PATCH by USING WDASM89 


Unlike previous version 1.1 , there is no registration
dialog box is provided.
Set your system date to one year ahead, run the program
did you received nag message " Sorry ... " , click OK
and program's quit.


1.  Open up REGEDITR.EXE in WDASM

2.  Find in the SDR ( = String Data Reference ) :

	"Beta testing period has expired!"
	"Sorry, The period has expired,"
	( double click on that string )

3.  Heres what did you get : 


	* Reference To: kernel32.GetSystemTime, Ord:0000h

	:0044A300 E8E3B1FBFF     Call 004054E8
	:0044A305 66817DE4D107   cmp word ptr [ebp-1C], 07D1 <== NICE
	:0044A30B 752D           jne 0044A33A <============= (1)
	:0044A30D 66837DE601     cmp word ptr [ebp-1A], 0001
	:0044A312 7626           jbe 0044A33A <============= (2)
	:0044A314 6A00           push 00000000

	* Possible StringData Ref from Code Obj ->"Beta testing period 
	  has expired!"

	:0044A316 68ACA34400       push 0044A3AC

	* Possible StringData Ref from Code Obj ->"Sorry, The period 
	  has expired,"

	:0044A31B 68D0A34400       push 0044A3D0
	:0044A320 8B45FC           mov eax, dword ptr [ebp-04]
	:0044A323 E80059FDFF       call 0041FC28
	:0044A328 50               push eax


WHERE TO PATCH :

	(1)
					   #4970B
					    ^^^^^	
	:0044A305    66 81 7D E4 D1 07 75 2D   change into
	:0044A305    66 81 7D E4 D1 07 EB 2D   


	(2)
					   #49712
					    ^^^^^
	:0044A30C    2D 66 83 7D E6 01 76 26   change into
	:0044A30C    2D 66 83 7D E6 01 EB 26   


	Open up REGEDITR.EXE in your HexEditor, goto hex offset
	#4970B  and  #49712.  Change the bytes as described
	in the above paragraph.
	Save your work.

	Final result :

	Difference(s) between regeditr.exe & regeditr.crk
	regeditr.exe
	0004970B: 75 EB
	00049712: 76 EB



TRIAL RUN :

	Set your system date to one year ahead i.e Jan 11, 2002
	Run your (patched) REGEDITR.EXE , did you see the nag ?
	NO ! then it's good.

	Test all options that the programs offered.
	Are they all working good ? I hope so ( LoL )

							^^^^
	NOTE : :0044A305  cmp word ptr [ebp-1C], 07D1
		 07D1=2001 (YEAR?)


END NOTES :

	Patching is EVIL !
	KeyGen is DEVIL !
	Serial Fishing is in BETWEEN !



ASTAGA [TTM] tute-regeditor12p.zip
[EOF] 1/11/01 10:32:38 PM
]]] ASTAGA's Tutorial - Free version A